Have you been blocked?
All blocklists are researched and managed by The Spamhaus Project.
Simply click on the link below, which will take you to the Project’s IP and Domain Reputation Checker. From here you will be able to enter your IP or Domain and begin your request for removal.
Please note that the Project’s IP and Domain Reputation Checker is the only place where removals are handled.
IT and security teams consistently face multiple business challenges. Discover how our solutions can help overcome some of those issues.
From processing issues, to email-borne threats our blocklists easily integrate with your current email set-up to improve anti-spam & anti-virus email filtering.
Employ our threat intelligence to increase visibility across security events, reveal potential weaknesses in your network, and threats to your brand.
Stay on top of the latest threats and proactively combat botnet infections, and other forms of abuse, with our solutions.
From clicking on phishing emails to visiting malware dropper sites, our threat intelligence provides automatic protection for your users.
Data for Integration
Enhance your service and create competitive advantage by integrating Spamhaus’ world-class IP and domain reputation data.
Our products provide additional layers of security for networks and email. They also present security teams with additional insight into malicious behavior.
Border Gateway Protocol (BGP) Firewall
Block the worst of the worst at your network edge, taking advantage of your existing BGP-capable routers. Configuration only takes minutes.
Data Query Service (DQS)
Benefit from industry-leading real time blocklists. These DNSBLs easily plug into your existing email infrastructure to block spam and other email threats.
A powerful research tool to investigate relationships between internet infrastructures. Quickly pivot to new areas of concern to rapidly investigate potential threats.
Immediately block connections to dangerous sites, including phishing and malware dropper websites. A ‘set and forget’ solution.
Spamhaus Intelligence API
Threat intelligence data in API format to enable users to easily integrate metadata relating to threats with their own applications, programs, and products.
abuse.ch Real Time Feeds - coming soon
Actionable data signals on cyber threats, with a focus on malware and botnets, to strengthen threat investigations, detections, and help prevent data breaches.
Integration | MDaemon
Block over 99% of email-borne threats with Spamhaus’ real time DNS blocklists and MDaemon® Email Server.
Integration | Halon
Safeguard your email stream using Spamhaus’ real time DNS blocklists and Halon’s secure email infrastructure.
Integration | Messageware
Enhance Microsoft Exchange protection by blocking malicious IP addresses from connecting to your on-premise server in real time.
A wide range of datasets, providing multiple layers of protection. They can be plugged directly into your existing hardware, making them an affordable choice.
Exploits Dataset Statistics
View the geolocation, hosting network, malware names associated with each detection, and other critical data points.
Border Gateway Protocol (BGP) Feeds
Do Not Route Or Peer (DROP) and Botnet Controller List (BCL) datafeeds can peer with your existing BGP-capable router.
Domain (DBL), Zero Reputation (ZRD) and Hash blocklists (HBL) enable you to block content in emails, filtering out a higher rate of email-borne threats.
Data for Investigation
Passive DNS and extended datasets give you additional information on internet resources. They provide deeper insights into incidents and possible threats.
DNS Firewall Threat Feeds
A wide range of feeds to apply to your DNS recursive server. Choose the right level of protection for your organization.
Spam (SBL), Policy (PBL), Exploits (XBL) and Auth (AuthBL) blocklists allow you to filter email from IPs associated with spam, botnets, and other threats.
abuse.ch Threat Intelligence Feeds – coming soon
URLhaus, MalwareBazaar, ThreatFox, YARAify, Feodo Tracker and Sandnet enrich CTI feeds and support vulnerability mangement.
Find out more about us.
Learn more about Spamhaus; who we are, and what we do.
Find a partner
Discover our partners and how they can support you.
Become a partner
Learn about the benefits of being a Spamhaus partner and how to get started.
Discover a wide range of blog posts, case studies and reports.
Spamhaus’ insight into malware, botnet C&Cs, and the domain reputation landscape.
Commonly asked questions about Spamhaus products and processes.
The Blocklist Tester
A tool to help you check if your servers are correctly configured to use Spamhaus DNSBLs.
The Reputation Portal
A tool for ASN owners to get visibility of their IPs’ reputation and proactively manage listings.
Help for the Project's legacy DNSBLs users
Using the Project’s legacy blocklists and suddenly experiencing email issues? This page may be able to help.
In depth information about the technical details and implementation of our products.
Posted by Sarah Miller on 11 Mar 2023
So, you’ve purchased your new domain, ensured it’s appropriately secured, and set up hosting in a good neighborhood. The following will help you nurture your domain and successfully build its reputation to ensure it’s an asset for the long term, not just the next 10 minutes.
When a security expert observes a domain for the first time on the internet, they will assign it with “no reputation” or “low reputation” because reputation is based on history. Generally, for the first 30 days after initial registration, most companies specializing in threat intelligence will flag a newly registered domain. The flag indicates the domain is under heightened scrutiny and is being watched for malicious activities, which include immediately sending mass emails.
Cybercriminals purchase hundreds, if not thousands, of domains in bulk to “burn” them. As soon as a data reputation specialist flags the domain as being malicious, the miscreants dispose of that flagged domain and use another one.
In contrast, an old domain that has been with the same owner for some time is a solid identifier for security specialists that someone has invested in this domain – it’s been cared for. Even at its most basic level, the domain owner has paid for its renewal annually. After all, even free domains have a cost associated with them after their first year. Nurture your domain to get it established… because….
The lack of any reputation associated with a domain will affect what you can immediately do with your new domain, including the ability for bulk email to be successfully delivered. Al Iverson discovered this as explained in Pro-tip: Age that new domain.
Additionally, having no associated reputation may prevent someone from reaching your website because their DNS provider is using DNS Firewall. This will block their request to visit your website because there is no reputation attached to your domain and therefore considered a potential risk to visit.
By adding a verification code to your DNS records, you are demonstrating to the broader internet community that you have control of this domain, i.e., someone is paying money to use this service on the domain, so they have an investment in it.
If a business owns the domain, make sure you don’t have any WHOIS Masking or Private Domain Registration in place. These privacy protection services are usually offered by domain registrars where they will either:
It’s important to remember that GDPR doesn’t apply to businesses, so please, be transparent. If it looks like you’re hiding who owns the domain, it seems suspect. You want people to be able to verify that your company owns your domain, and this builds trust and increases the reputation of your domain.
Think about how you’d feel opening your front door to someone with their whole face and eyes obscured. You’d probably feel a little uncomfortable and unlikely to trust that individual. In the same way, don’t hide who you are as a domain owner.
Now you own a new domain; you can send emails, right? Er…no. Not so fast.
If you have a bonafide requirement for a new domain name in addition to your main one, ensure it can be related back to your brand domain. The more links between your domains, the stronger the relationship is, and your domains’ reputation will be stronger. Here are a few suggestions on how to establish that connection:
The set-up of various authentication and encryption protocols is crucial to establishing good deliverability. Bypass this at your own risk. From DKIM to SPF, this best practice, written by our deliverability experts, has it covered.
Don’t send a bulk email run with your newly acquired domain name. First impressions matter a great deal and remain for a long time.
Increasing volume and speed rates should depend on each previous deployment’s results. This means that today’s email marketers should be focusing on engagement. The days of “batch and blast” are over. Still, the good news is that the more engagement an email receives, the better the domain’s reputation and deliverability improves. It is not instant and can be very frustrating, but it is worth it.
See our Deliverability 101 eBook for a detailed look at how to ensure emails are delivered successfully.
The guidance we’ve provided in this series is by no mean exhaustive, but it provides strong foundations to help you successfully build the reputation of your newly registered domain.
Spamhaus Intelligence API (SIA) contains context-rich metadata relating to IP and domain reputation. Integrate this data with your applications to enhance existing data feeds, or consume as an independent data source.
In this easy-to-consume format, SIA can be used for threat detection and investigation, risk scoring, customer vetting, validation and much more.
29 March 2023
Choosing a domain name registrar may seem simple, but considering security risks in the domain and DNS ecosystem is crucial. In this blog post, Vincent D'Angelo, Global Director at CSC, shares insight into the role of domain registrars in domain ecosystem security and reputation.
23 March 2023
The Domain Name System (DNS) is the backbone of the internet, enabling agile communication between internet entities. This blog post will focus on top-level domains (TLD), and how they can impact the security landscape.
14 February 2023
if you're confident you must buy a new domain, here are some key considerations to make before and immediately after the domain purchase.